It feels great to get to the point where you have built a cybersecurity program for your business. As a CISO you got the executive buy-in, everyone has backed the need for a data security and risk management program and you feel a sense of accomplishment. You’ve spent time involving the whole ...

Even before the COVID-19 pandemic took hold, too many organizations were not looking at a broad enough approach to cybersecurity as they evaluated their operating models.  As we highlighted in our blog post about the recent Twitter breach, an IT-centric security approach is never sufficient. For ...

We might not be surprised when we read about another data breach but it does turn heads when it is a well-known brand like Twitter.  Recent reports about a significant breach at Twitter were stunning. High profile accounts were hacked in an attempt to solicit bitcoin. Florida police have now ...

The typical company significantly under invests in cyber security, a situation that is likely to be exacerbated as companies look to cut expenses during the current pandemic. Even worse, investments that are made are often made in the wrong place meaning the cybersecurity budget allocated is not ...

Security and Risk Management can be complicated. Predicting what might happen to your business and preparing to protect and mitigate against those threats or risks is challenging.  COVID-19 caught most of us off-guard and sent our security and risk management teams into overdrive with an increase ...

We have learnt a lot in the last year since we launched the successful MyVCM CrossWalk Assessment feature, an addition to the industry leading Ostendio MyVCM integrated risk management platform.  CrossWalk Assessment is a way to help companies, and their auditors, avoid duplication and reduce time ...

The California Consumer Privacy Act (CCPA) went into effect on January 1st 2020 but there are stages to its enforcement and we are about to hit another milestone.  July 1st 2020 is when the CCPA enforcement phase begins which means that the Attorney General of California will be able to take action ...

It is hard to believe it has been a year since we launched MyVCM CrossWalk Assessments. This new feature radically changed the way companies approached their data security programs and many Ostendio customers are enjoying the benefits that the feature offers. In the last year, 92 organizations ...

Security certifications are a must for vendors and technology firms. Many organizations choose SOC 2 as a way of demonstrating effective risk management practices and meeting regulatory requirements. Holding a SOC 2 shows that your organization takes security seriously and now, more than ever, ...

CIOs have mostly ridden out the remote work surge caused by COVID-19.  The employees who can work remotely are now safely settled in their home offices and CIOs have systems in place to handle the more distributed access requirements.  So what should a CIO turn to next?  The answer is simple: ...

May 2020 marks the second year that GDPR has been in effect and we have already seen some significant fines totalling over $126 million.  Google has taken the biggest hit so far with a January 2019 fine of $53 million from the French data protection watchdog.  But what has it meant for small to ...

How is your business showing compliance to operational and business risks during these uncertain times? Many companies turn to the popular SOC report (Systems and Organizational Controls) conducted by a CPA who is accredited with the AICPA.  These auditing standards require an independent and ...

During these difficult times it is understandable that organizations may be looking for creative ways to cut costs or gain efficiency.  While investing time to build out your information security program may not seem like a cost saving idea, it can actually introduce significant operational ...

We are all getting used to our new “normal” but many businesses, both big and small, have been caught off-guard by the COVID-19 crisis. Having to move to a remote work situation for employees and manage a business in a crisis situation was a shock to many.  However, we shouldn’t ignore the lessons ...

As we start to adapt to our new quarantined life, one of the things that has struck me is how different people have benchmarked what they constitute to be effective social distancing and therefore the risk they are willing to accept. At Ostendio, we manage risk every day and there are similarities ...